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TWISTS OF NON-HYPERELLIPTIC CURVES 


ELISA LORENZO GARCIA 


Abstract. In this paper we show a method for computing the set of twists of a non-singular 
projective curve defined over an arbitrary (perfect) field k. The method is based on a correspondence 
between twists and solutions to a Galois embedding problem. When in addition, this curve is non- 
hyperelliptic we show how to compute equations for the twists. If k = F 9 the method then becomes 
an algorithm, since in this case, the Galois embedding problems that appear are known how to 
be solved. As an example we compute the set of twists of the non-hyperelliptic genus 6 curve 
x‘ - y 3 z 4 — z 7 = 0 when we consider it defined over a number field such that [fc(^ 2 i) : k\ = 12. For 
each twist equations are exhibited. 


1. Introduction 

The study of twists of curves can be a very useful tool for understanding some arithmetic prob¬ 
lems. For example, it has been proved to be really helpful for exploring the Sato-Tate conjecture [8], 
uni, m, mm- As well as for solving some Diophantine equations m or computing Q-curves 
realizing certain Galois representations 0, m- 

The twists of curves of genus < 2 are well-known. While the genus 0 and 1 cases date back to a 
long time ago [20], the genus 2 case is due to the work of Cardona and Quer over number fields [3], 
0, and to Cardona over finite fields @]. All the genus 0, 1 or 2 curves are hyperelliptic (at least 
in the sense that they are not non-hyperelliptic, since genus 0 and 1 curves are not usually called 
hyperelliptic). However, for genus greater than 2 almost all the curves are non-hyperelliptic. Only 
few twists of genus 3 curves over number fields have been previously computed [7], [18]. Over finite 
fields, more twists of genus 3 has been computed EE], but, in this case, equations are not given. 

We devote the present paper to show a method for computing twists of smooth curves of genus 
greater than 0, and in the particular case of non-hyperelliptic curves we show how to compute 
equations for the twists. The method is not completely original since it is based on well-known 
results, but as far as we know this is the first time that all the strategies used for computing 
twists are joined together and all the gaps are filled in order to produce a systematic method. 
In particular, when the held of definition of the curve has characteristic different from zero, the 
method gives rise to an algorithm. 

In a forthcoming paper EE], this method will be useful for computing the twists of all non- 
hyperelliptic genus 3 curves defined over any number held. 

1.1. Outline. The structure of this paper is as follows. Section [2] establishes a correspondence 
between the set of twists of any smooth and irreducible genus g > 0 curve C defined over a perfect 
held k and the set of solutions to a Galois embedding problem, see Theorem 12.21 In Section [3] 
we show how to compute equations of the twists in the particular case in which the curve C is 
non-hyperelliptic. We do this by studying the action of the Galois group of a certain extension of 
the held of definition of the curve C, in the vector space of regular differentials H * 1 ((7). Section [4] 
describes in detail the method obtained for computing the twists of non-hyperelliptic curves. First 
step is computing a canonical model of the curve. The second one is posing the corresponding 
Galois embedding problem, whose solutions are in bijection with the set of twists, and solving 
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it. In general, if /c is a number field, there is not known method for solving a Galois embedding 
problem over k, and this step should be treated case-by-case. We compute the solutions to an 
infinity family of such problems in Proposition 14.11 Nevertheless, if A; is a finite field, any Galois 
embedding problem over k is known how to be solved (e.g. m Chapter 1]) . The third and last step 
is computing equations for the twists. Finally, in Section [5] we illustrate the method by computing 
all the twists of the non-hyperelliptic genus 6 curve x‘ - y 3 z' 1 - z' = 0 when it is considered to be 
defined over a number field such that [fc(C 2 i) : k] = 12. 

1.2. Notation. We now fix some notation and conventions that will be valid through the paper. 
For any field F, we denote by F an algebraic closure of F, and by Gp the absolute Galois group 
Ga l(F/F). We recurrently consider the action of Gf on several sets, and this action is in general 
denoted by left exponentiation. For a field F, let GL„(F) (resp. PGL n (F)) be the ring of n by n 
invertible matrices with coefficients in F (resp. that are projective). 

By k we always mean a perfect field. All field extensions of k that we consider are contained in 
a fixed algebraic closure k. We write Cn to refer to a primitive n-th root of unity in k. When k is 
a number field, we denote by Ok the ring of integers of k. 

Given a projective, smooth and geometrically irreducible curve C/k we denote by Aut(C) the 
grup of automorphisms of C defined over k. By K we denote the minimal extension K/k where all 
the automorphism of C can be defined. The Ar-vector space of regular differentials of C is denoted 
by n\C). 

When we work with groups, we usually use the SmallGroup Library-GAP m Where the group 
< N,r > denotes the group of order N that appears in the r-th position in such library. By ID(G), 
we mean the corresponding GAP notation for the group G. 

1.3. Aknowledgments. The author would like to thank to Joan-Carales Lario for bringing this 
problem to her attention and to Francesc Fite for a careful reading of the manuscript and useful 
comments and suggestions. 

2. Galois embedding problems 

Let k be a perfect field and C/k be a projective curve of genus g > 0. Let us denote by K the 
minimal field where all the automorphisms of C can be defined. Let us define the twisting group 
r := Aut(C) xi Gal(K/k), where Gal( K/k) acts naturally on Aut(C), and the multiplication rule is 
(a,a)(/3,r) = ( a a /3,(TT ) [9]. 

Let us define the following sets: 

Twistfc(C) := {C'/k curve j 3 k -isomorphism cj)'.C' -*■ C} jk -isomorphism, (1) 

H 1 (Gfc, Aut(C)) := {C-G k -x Aut(C) continuous | £ CTr = ^ a a &} / (2) 

where the topology in G k is the profinite one, and we consider the discrete topology in Aut(C). 
Two cocycles are cohomologous £ ~ if and only if, there is <p e Aut(C) such that ££. = <£>-£o-•°V _1 . 
We also define 

Hom(Gfc,r) := {T: G k -> T | T epi 2 - morphism} / ~, (3) 

the meaning of epi 2 - morphism is that f is a continuous group homomorphism (again with the 
profinite and discrete topologies respectively) such that the composition 7r 2 -'L : Gfc-»r-> Gal (K/k) 
is surjective where 7r 2 : T -*■ Gal (K/k) (resp. 7Ti) is the natural projection on the second (resp. 
first) component of the elements of T. We say that T ~ 4/' are equivalent if there is ((p, 1) eT such 
that % = (¥>,l)^er(¥>,l) -1 . 
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Definition 2.1. With notation above, we say that L is the splitting field of the twist ■ C' -* C, 
if L is the minimal field where, for all a e Aut(C), the isomorphisms a o <f are defined. Similarly, 
we define the splitting field of a cocycle £ as the field L that satisfies the condition 

Gal(k/L) = |J Ker(0- 

Since £ is continuous, L is well-defined. 

For an element 'F e Hom(Gfc,r), we define its splitting field as the field L such that Gal(k/L ) = 
Aer('F). 

Notice that the previous splitting fields are all of them finite extensions of k since we are consid¬ 
ering curves of genus greater than 0, and then the group Aut(C) is finite. 

Theorem 2.2. There are natural one-to-one correspondences between the following three sets: 

Twistfc(C') —> H 1 (Gfc, Aut(C)) —» HoiS(G fc ,r) 

These correspondences send (j> to £ CT = f> ■ a <fr l , and £ to 4^ = (£o-,<t), where W denotes the 
projection of a £ G k onto G&l(K/k). Moreover, the splitting fields of elements in these three sets 
are preserved by these correspondences. 

Proof. The correspondence between the set © of twists Twistfc(C) and the first Galois cohomology 
set (l2|) is well-known and can be found in [201 X.2 Theorem 2.2]. The statement about the splitting 
fields follows by definition. So, it only remains to prove that the map between the sets © and ([3]) 
is a correspondence. Let us first prove that they are well-defined. Clearly, given £ e Twistfc(C'), 
we have that *F defined by 'L cr := (£&,&) defines an element in Hom(Gfc,r). Conversely, given an 
element \F e Hom(Gfc,r), we have that £ := 7 Ti(\F) defines an element in Twistfc(C'). Finally, it is 
a straightforward computation to check that this two maps are one inverse to the other and that 
they preserve the equivalence relations defined in both sets. □ 

Remark 2.3. Notice that any element \F e Hom(G7,r) can be reinterpreted as a solution to the 
following Galois embedding problem: 


G k (4) 

/ 

1-- Aut(C) c ^ T Gal (K/k) -^ 1 

Reciprocally, every solution 'F of the above embedding problem is an element in Hom(G/c,r) and 
gives rise to a twist of C. In order to keep track of the equivalence classes of twists we must here 
consider two solutions \F and \F / equivalent only under the restricted conjugations allowed in the 
definition of the set Hom(Gfc,r), that is slightly different from the standard one [17, Section 9.4]. 

3. Equations of the twists 

First of all, remark that a twist is not a curve, it is an equivalence class of curves, so when 
we say that we compute equation for a twist, what we mean is that we compute equations for 
some particular curve in the equivalence class. Secondly, notice that a curve can have different 
models, and a particular model for a non-hyperelliptic curve is its canonical model. The method 
that we present in this section, it is a method for computing the canonical model of a curve in the 
equivalence class of a twist defined by a cocycle. 

This method is a generalization of the one used by Fernandez, Gonzalez and Lario [7]. They used 
it for computing equations of twists of some particular non-hyperelliptic genus 3 curves, special case 
for which the canonical model coincides with the plane model. 

3 







Notice that, in our context, finding equations for a twist that is given by a cocycle £ e H 1 (Gk, Aut(C)), 
is actually equivalent to computing an inverse map for the correspondence in Theorem 12.21 

Twistfc(C) —■> H 1 (G/ C , Aut(C)). 

Let fl 1 (C') be the fc-vector space of regular differentials of C. Let uq,...,cu 3 be a basis of 
n 1 (C), where g is the genus of C (the existence of such a basis can be deduced from the fact 
that there always exists a canonical divisor defined over the definition field k of the curves, which 
is a consequence of [221 II, Lemma 5.8.1]). Given a cocycle £ : G& -» Aut(C') and its splitting 
field L, we consider the extension of scalars Ll\(C) = f! 1 (C') L which is a k-ve ctor space of 
dimension g\L : k ]. We can then see the elements of Q^(C) as sums E where \ e L. For every 
a e Gal (L/k), we consider the twisted action on Q} l (C) defined as follows: 

Here, £* e End/i-(H 1 (C')) denotes the pull-back of £ CT = (j)- a (f)~ l € AutR-(C'). One readily checks that 

Gal (L/k) -+ GL (0.1(C)), pz(<t)(u) ■= uj% 
is a fe-linear representation. Indeed, since £* r = ff £* • £*, we have 


p e («'’-)(E^) = E" T ^e; 1 («) 

= p £ G)(E T VtrVi)) 

= P((v)pt(T ME Am). 

Lemma 3.1. Let (j ): C -*■ C' be a twist such that (f>o a 0 _1 = £„-. Then, the following k-vector spaces 
are isomorphic as Gk~ modules: 

ni(c)^ al(L/fc) ^(C"). 

Proof. We claim that the map Q 1 L (C) < /f al( ' L ^ k ' > -»• H 1 (G') : uj -»■ 4>*(lo) is an isomorphism of Gfc-modules. 
The only non-trivial fact is the surjectivity. But this is a consequence of the equivalent result for 
function fields. Recall that the function field k(C') may be reinterpreted as the fixed field k(C)^ k 
where the action of the Galois group Gk on k(C) is twisted by £ according to f£ := / • £ 0 - [2Qj 
X.2]. □ 


We identify the previous vector spaces via an isomorphism as in Lemma 13.11 so, for explicit 
computations, we can use 

H 1 (C')= ft Ker(p ? (a)-Id). (5) 

o-eGal (L/k) 


Consider the canonical morphism and the canonical model 4>k : C 
{ui, ...,uj g } of H 1 (G). Let 


C cF 9 1 given by the basis 


C : {F h (u = 0}^ 

be a set of equations defining the canonical model in P 9_1 . Let {Ef =1 T l j u i}j be a basis of n^(C')^ al ^ L ^ 
We can then take a basis w' = Ef = i pfai °f ^ 1 (C , ) via an isomorphism as in Lemma 13.11 Thus, we 
can write 


Ui 


9 
3 = 1 


■X- 
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for some 77 * e L. We then obtain equations for the canonical model C , given by the basis {uij}, of 
the twist C' via the substitution 

C' ■ \ F h(Z, T lj U} j’-’ = Kiu'n-u'g) = °! • 

l i=i i=i J ft 

Notice that the projective matrix 77 = defines an isomorphism of canonical models 77 : G -+ C, 

and that rj- a rj -1 = (£*) _1 . In general, on a canonical models level, any morphism of curves is given 
by a matrix, since a morphism of curves induces a linear morphism on the regular differential vector 
spaces. 

Remark 3.2. Notice that, for non-hyperelliptic curves, Lemma \3.1\ is equivalent to prove that the 
dimension of is equal to n, that is, to find a matrix in 77 e GL g (L) such that r]- a r ]~ 1 = 

(£*) _1 . But this is a consequence of Hilbert 90th Problem since (£*) _1 e H l (Gal(Ljk), GL{yfi L {C))). 

4. Description of the method 

Let C be a smooth non-hyperelliptic genus g curve defined over a perfect field k. Assume that 
its automorphism group Aut(G) is known and let us denote by K the minimal field where Aut(G) 
is defined. We now proceed to describe a method for computing the set of twists of the curve C. 
In each step, we will compute different things: 

Step 1: a canonical model. Firstly, we take a basis of D 1 (C'), and via this basis we obtain a 
canonical model C/k as the image of the canonical morphism C ^ P 5_1 . Again, the existence of a 
canonical divisor defined over k implies that we can take the canonical model C also defined over 
k. Hence, C and C belong to the same class in Twist*, ( C ) and Twist*, (C) = Twist*, ( C ). 

In addition, the automorphisms group Aut(C) can be viewed in a natural way as a subgroup 
of PGL ff (AT) (via the induced automorphism in P s_1 by the canonical morphism). Indeed, we can 
see it as a subgroup of GL g (K) if we look at its action on H 1 (C') 0*, K as a iL-vector space. 
Furthermore, any isomorphism cf>: C 1 -*■ C can be also viewed as a matrix in PGL ff (A:). 

Step 2: the set Twist*,(C'). We will first compute the set Hom(G*,,r). From this set, we will 
compute H 1 (G*,, Aut (C)) via the correspondence in Theorem 12.21 

Given an element T e Hom(G*,,r), let L be its splitting field. We have the following isomor¬ 
phisms: T(G^) - Gal (L/K) and ^(G*,) - Gal (L/k). Hence, we can see f as a proper solution to 
the Galois embedding problem 

G k 

/ 

1-. (G*)-- *(G fc )-- Ga l(K/k) -- 1 

As it was noticed in Section [2J we have Gal (L/k) - Image (T) c r and Gal (L/K) - T (Gk) £ 
Aut(C) x {1}. Hence, we can break the computation of Hom(G*,,r), i.e., the solutions (proper or 
not) to the Galois embedding problem Q, into the computation of the proper solutions to some 
Galois embedding problems attached to a pair ( G,H ) as follows 

G k (6) 

/ 

/ 

Jt-' 

1-- H -x- G-^ Gal (K/k) -^ 1 


5 












where we consider all the pairs ( G,H ) such that G £ r, H = G n Aut(C) x {1} and [G : H ] = 

|Gal (K/k)\ (up to conjugacy by elements (<p, 1) e T). 

Every proper solution to a Galois embedding problem © can be lifted to a solution to the Galois 
embedding problem (]4|). 

Notice that the same field L can appear as the splitting field of more than one solution T 
corresponding to a pair (G,H). This is because given an automorphism a of Gal(L/A) that leaves 
Gal(IL/A) fixed, a'L is other solution that has L as splitting field. Two such solutions are equivalent 
if and only if there exists (3 e Aut(C) such that a\k = /3'L/3~ 1 . So, the number of non-equivalent 
solutions with splitting field L and T(Gfc) = G is the cardinality ntQ H ) of the group [5J: 

Aut 2 (G)/Inn G (Aut(C) x {1}), (7) 

where Aut 2 (G) is the group of automorphisms of G such that leave the second coordinate invariant 
and Inn(Aut (C) x {1}) is the group of inner automorphisms of Aut (C) x {1} lifted in the natural 
way to Aut (G). 

We can then divide this step in two: 

Step 2a: computing the pairs ( G,H ). The pairs (G,H) and the number n^c.H) defined above, can 
be, for example, computed with magma [I] (c.f. [14L Appendix] for an implemented code). 

Step 2b: computing the proper solutions to the Galois embedding problems (GJ). The solutions should 
be computed case-by-case for each pair ( G,H ). If A: is a finite field this is know how to be done 
(e.g. [T9l Theorem 1.1]), and the method described in this paper becomes then an algorithm. 
Unfortunately, if A: is a number field there is not known systematical method for solving these 
problems 

Next proposition, that is a generalization of [6, Lemma 9.6] for q = 3, will be useful for solving 
some of these Galois embedding problems. 

Proposition 4.1. Let be q = p r , where p is a prime number, let k be a number field, and let ( 
be a fixed q-th primitive root of the unity in k. We denote K = A(£) and we assume [A(£) : A:] = 
p r ~ l {p- 1). Let us define G q := Z/gZ x (Z/gZ)* where the action of (Z/gZ)* on ’L/q'L is given by 
the multiplication rule (a,b)(a',b') = (a + ba',bb'). Let us consider the Galois embedding problem: 

G k 


1->■ Z/gZ- 9 - G q -► (Z/gZ)*-^ 1 

where the horizontal morphisms are the natural ones, and the projection it is given by tt(ct) = (0, b ) 
if cr{C) = ( b - Then, the splitting fields of the proper solutions to this Galois embedding problem are 
of the form L = K(j/m) where m e O k is an integer that is not a p-power. Moreover, every such 
field is the splitting field for a solution T to the above Galois embedding problem. 

Proof. Notice first that there exist proper solutions T to the Galois embedding problem. Given a 
field L = K(^/m) with mU and not a p-power, there is a natural isomorphism Gal(L/k ) ~ G q 
compatible with the projection G q -»• (Z/gZ)*. The natural projection G k -*>• Gal(L/k) then 
provides a solution to the Galois embedding problem above. 

Now, let T be any proper solution to the problem, and let us denote by L its splitting field. Let 
G be the subgroup of G q that contains all the elements of the form (0,6), and let a € G k be such 
that T((t) = (1,1). 

Let a be a primitive element of the extension L^/A: that moreover is an algebraic integer. We 
then have that L = K(a). This is because [K : A’] = p r ~ 1 {p - 1), [L G : A] = q and L G n K = A. Let 
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us now define for i = 0, 1, ...,g - 1 the numbers: 

m = a + CVV) + C 2 V" 2 (a) + ... + 

Then c(rtj) = £*itj and for any r e Gfc such that 'h(r) = (0,6) we have \E r (T<7 J ) = (0,6)(j, 1) = 
(bj, 1)(0,6) = ^(cr^r), so r{ui) - Ui . In particular, we have that uq, uf,..., u^_ 1 e 0*,. Hence, if 
Uj ± 0 for some j > 0, we have that L = K(uj), since L G = k(uj). So, if we put m = u q £ Ok, we get 
L = K(^/m). Otherwise, that is, if u\ = « 2 = = u q -i = 0, then uq = uq + u\ + ... + u g _i = qa e Ok, 

what is a contradiction with a being a primitive element of the extension L G /k. 

□ 

For each proper solution T to a Galois embbeding problem Q attached to a pair ( G,H ), we 
trivially compute the corresponding cocycle £ via the correspondence between the sets © and Q 
in Theorem 12.21 

Step 3: Equations. We want to compute equations for a twist corresponding to a given cocycle £. 
For this purpose we use the method explained in Section [3l Computing equations for a twist turns 
out to be equivalent to computing an isomorphism (j): C' -*■ C, that is, to explicitly computing the 
inverse map to the correspondence between sets (H|) and ([2]) in Theorem 12.21 

5. An example 

In order to illustrate the method, we will apply it to the smooth non-hyperelliptic genus 6 curve 
which admits the affine plane model 

C : x 1 - y 3 - 1 = 0. 

As the point at infinity is singular, the projectivization of this plane model is not smooth. However, 
there is a unique curve, up to Q-isomorphism, which is smooth and birationally equivalent to C. 
So, they have the same function field. We will apply the method for this smooth curve, which is 
non-hyperelliptic and has genus equal to 6. 

Step 1. First, we must find a canonical model by the usual procedure: finding a basis of holomor- 
phic differentials. Let us call X = x/z and Y = y/z. One has 

div(A) = (0 : -1 : 1) + (0 : -£ 3 : 1) + (0 : -£f : 1) - 3(0 : 1 : 0) = Pi + P 2 + P 3 ~ 3oo, 

div(l) = Q i + Q 2 + Qs + Q 4 + Q 5 + Qa + Q 7 — 7oo, 

where Qi = (Q : 0 : 1). Then, dX is an uniformizer for all points except for the Qi s, because the 
tangent space to the curve at these points have equation X - a = 0 for some a e k. Then, for the 
points Qi s we have to use the expression 

dX - dY 

7x 6 

Thus, by f20 ; , Proposition 4.3], we finally get 

div(dX) = 2(Qi + Q 2 + Q 3 + Qi + Qa + Qa + Q 7 ) ~ 4oo. 

We obtain the following basis of holomorphic differentials: 

dX XdX X 2 dX dX X 3 dX XdX 

) w 2 - — 2 ■ w 3 - ^2 ’ W4 _ ~y ~> _ y'2 1 W6 _ 

We consider the rational map 

C -> P 5 : (x : y : z) -> ( z 3 : xz 2 : x 2 z : yz 2 : x 3 : xyz) 
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The ideal of the image of this map clearly contains the homogeneous polynomials: 
fl = UlUlQ -W 2 W 4 , /2=W2-WlW3, / 3 =W2W 3 -WiW 5 , 

fs = UJ2UJ6 -U3LJJ4, = LU3LUQ — W4W5, f 7 = <^4 - W3W5 + wf, fs = UJ§ - UJ4UJI - 

Now, we claim that the ideal generated by these polynomials gives a smooth curve. To see this, 
note that, if U\ 4 0, the deshomogenization of this ideal with respect to uq gives the affine curve C. 
Now, we isolate from /2 and / 3 the variables cj 3 and W 5 and we plug them into f 7 . Therefore, C is 
birationally equivalent to C n {cm * 0}. Next, if ui\ = 0, then the vanishing locus of $ 2 , fi, h, f& is 
the point (0 : 0 : 0 : 0 : 0 : 1). To check that C is non-singular at this point we consider the partial 
derivatives of the polynomials: f\, f*>, f§, f%- Thus, C is a canonical model of the initial smooth 
non-hyperelliptic genus 6 curve. 

The automorphism group Aut(C) is generated by the automorphisms [21] : 

(x:y:z)-+(x:( 3 y: z ) and (x : y : z) (( 7 x :y : z). 

Then, the automorphism group of the canonical model C is generated by the matrices in PGLg (Q): 


' C 3 

0 

0 

0 

0 

0 


' C 7 

0 

0 

0 

0 

0 

0 

C 3 

0 

0 

0 

0 


0 

C 7 2 

0 

0 

0 

0 

0 

0 

C 3 

0 

0 

0 


0 

0 

C 7 3 

0 

0 

0 

0 

0 

0 

c 2 
S3 

0 

0 

1 s 

0 

0 

0 

C 7 

0 

0 

0 

0 

0 

0 

C 3 

0 


0 

0 

0 

0 

C 7 4 

0 

0 

0 

0 

0 

0 

C 3 2 ) 


l 0 

0 

0 

0 

0 

C 7 y 


Step 2a. Let A: be a number field and consider the curve C/A. We want to compute its twists over 
A. Let K = k{C, 7 , £ 3 ) and assume that [K : k ] = 12. Then, we compute using MAGMA the following 
possibilities for the pairs ( G,H ): 



ID(G) 

ID (H) 

gen (H) 

n (G,H) 

1 

<12,5 > 

< 1,1 > 

1 

1 

2 

< 36,12 > 

<3,1 > 

r 

2 

3 

< 84, 7 > 

< 7,1 > 

s 

6 

4 

< 252,26 > 

< 21,2 > 

r , s 

12 


The fourth column in this table exhibits generators of the group H. In all the cases G is the 
group generated by the elements (g, 1), for g in H, together with the elements (1 ,ti) and ( 1 , 72 ), 
where t\ is the element in Gal (K/k) which sends £ 3 into C 3 and £7 into £ 7 , and 72 is the element 
which sends £3 into <[3 and <[7 into The fifth column exhibits the cardinality of the set in Formula 
dH) for each pair ( G,H ). 

Step 2b. Now, we have to find the proper solutions to the Galois embedding problems associated 
to each of the pairs ( G,H ). 

1. The first case is clear: L = K. 

2. For the second one, note that L = k(&)M, where M/k is a solution to the Galois embedding 
problem in Proposition 14.11 with q - 3. Hence, L = k{ £ 3 , £ 7 , y/m ), for some m € Ok that is 
not a 3-power. 

3. In this case, we can write L = A(^ 3 )M, where M/k is a solution to the Galois embedding 

problem in Proposition 14.11 with q = 7. Hence, L = 3 , \/n), for some n e Ok that is 

not a 7-power. 

4. In the last case, L = M 1 M 2 , where M*/A is a solution to the Galois embedding problem in 
Proposition 14.II with q = 3,7. Hence, L = fc(C 3 , £ 7 , y/m, \fn)i for some m,n e Ok, where m 
is not a 3-power and m is not a 7-power. 















Step 3. Fir each previous field L, we will compute equations of a twist that has L as splitting field. 
The other twists, with splitting field L, will be then easily computed by considering symmetries. 
Let us consider a solution T (that is, a particular twist) to the Galois embedding problem with 
pair (G,H) and splitting field L by fixing an isomorphism between the group H and the group 
Gal (L/K): 

(r, 1) : v/m, Ifn -* Vn, 

(s, 1) : y/m, y/n -*■ y/m , C^y/n. 

Now, we compute equations for a twist in each case: 

1. Clearly, this solution gives us the trivial twist, so we have the curve C/k. 

2. The correspondence between the sets (|2|) and ([3]) gives us the cocycle given by £ n = 1, = 1 

and £(r,i) = r. If we take the basis of G^(C) given by {(a,b,c,i)} := {y/m a (^C,jUJij where 
a, b e {0,1,2}, c e {0,1,..., 6} and i e {1,..., 6}, we obtain the twisted action of Gal (L/k) on 
Ll\(C) given in Section [3j 


Ti(a,b,c,i) = (a,2b,c,i), T 2 (a,b,c,i ) = (a,b,3c,i) 


(r,l)(a,b,c,i) 


(a, a + b + 2, c, i) if i = 4,6 
(a, a + b + 1, c, i) otherwise 

Now, we use formula © and get a basis of G 1 (C / ) - given by: 

' m 2 u}2, y/mui 4 , y/moj§\. 


3 /—y 3 / 

V m z ujh 


So we get the generators of the ideal defining the twist: 


WlW6-a;2W4, 0J 2 -CU 1 W 3 , 


W2W3 - W1CJ5, 


UJ 2 UJ 5 - w 3 , 


3 2 3 3 2 2 

U 20 JG - CJ 3 CJ 4 , CJ 3 CJ 6 - u^s, mw 4 - CJ 3 CJ 5 + - racj4a; 6 -Cc;ia;2 

We obtain generators for the other solution T that has L as splitting field by exchanging 
m by m 2 . 

In this case, the correspondence between the sets © and (O gives us the cocycle given 
by £ ri = 1, in ~ 1 and C(s,i) = s. If we take the basis of Ll\(C) given by {(a,6, c,i)} := 
{^C|C 7 c ^}, where a,c e {0,1,...,6}, b e {0,1,2} and i e {1,...,6}, we obtain the twisted 
action of Gal (L/k) on it given in Section [3) 

Ti(a,b,c,i) = (a,2b,c,i), T 2 (a,b,c,i ) = ( a,b,3c,i) 


( r , 1)(°> b, c, i) = 


(a, a + b + 1, c, i) if* = 1,4 
(a, a + b + 2, c, i) if * = 2,6 
(a, a + 6 + 3, c, z) if i = 3 
(a, a + 6 + 4, c, i) if i = 5 

Now, we use formula Q again and get a basis of G 1 (C / ) - given by 

7/ n*kji, VnPuj2, Vn^ujs, 


Then, we get the set of generators of the ideal defining the twist: 


wiu; 6 - cu 2 W4, 


CJ 2 - W 1 W 3 , 


w 2 W3 - W 1 W 5 , 


w 2 w 5 -w 3 , 


3 2 3 3 2 2 

CJ2^6 “ ^3^4 5 6^36^6 _ ^4(^5, ^4 “ TlUJ^b + 5 ^^5 “ 



We compute generators for the other solutions 'h that have splitting field equal to L by 
exchanging n by n 2 , re 3 , re 4 , re 5 , re 6 . 

4. In the last case, we have the cocycle given by f T = 1, £( r ,i) = r and £( s ,i) = s. We take the basis 
of El l L (C) given by {(a, b, c, d, /)} := | \/m a where a, c e {0,1,2}, b, d e {0, ...,6} 

and i e {1,..., 6}, and we consider on Tt) L (C) the twisted action of Gal(L/k) given in Section 
[3l Thus, formula © provides a basis of Q}(C) - given by: 

[ 3/ o 7/ R 7/ 2 7/ 5 7/ 2 a 7 / 4 3/~~ 7/ 6 a 3 / 2 a 7 / 3 3/ 7/ 5 1 

j Vm z Vn D wi, Vm z vn°a;2, Vm z vrw 3 , v m vn D W 4 , Vra z V y ravn 0 cj 6 f. 

Then, we get the set of generators of the ideal defining the twist 

CJ 1 CJ 6 - W 2 CU 4 , CJ 2 -W 1 W 3 , W 2 W 3 -WiU; 5 , CJ 2 W 5 -W 3 , 

CJ2W6-W3W4, W3W6 _ ^ 4 ^ 5 , nui 2 LV^ + uj\, nuj§ - muJibjQ-uJiJi, 

We compute generators for the other solutions T that have L as splitting field by exchanging 
m and re by m, m 2 and re, re 2 , re 3 , re 4 , re 5 , re 6 . 

We can summarize these results as follows: 

Proposition 5.1. The twists of the curve C/k defined above where k is a number field such that 
[/s(C 2 i) : k] = 12, are in one-to-one correspondence with the curves given by the ideals generated by 
the following homogeneous polynomials: 

CJ 1 CJ 6 - w 2 cu 4 , U 2 -UJ 1 UJ 3 , U 20 J 3 -CJ 1 W 5 , W 2 W 5 -W 3 , 

3 2 3 3 2 2 

CJ2^6 - ^3^4, W3W6 ~ ^4^5, mcj 4 - noj 3 cj 5 + uj 1 , nuj§ - 

where m e 0£/(C>£) 3 and re e 0^l{0* k )‘. Equivalently, we can consider the (singular) plane models 

7 3 4 7 

rex - my z - z =0. 
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